Corporation

SARATM

Services

Research

Community

Intranet

Home


Contact Us

Credits

Security Auditor's Research Assistant

The Security Auditor's Research Assistant (SARA) is a third generation network security analysis tool that that has been available and actively updated for over 10 years. Sadly, all good things have to come to an end and so it goes for SARA. SARA 7.9.1 is our last release.(1 May 2009) Actually, SARA-7.9.2a is the final release (1 August 2009).

SARA:

  1. Operates under Unix, Linux, MAC OS/X or Windows (through coLinux) OS'.
  2. Integrates the National Vulnerability Database (NVD).
  3. Performs SQL injection tests.
  4. Performs exhaustive XSS tests
  5. Can adapt to many firewalled environments.
  6. Support remote self scan and API facilities.
  7. Used for CIS benchmark initiatives
  8. Plug-in facility for third party apps
  9. CVE standards support
  10. Enterprise search module
  11. Standalone or daemon mode
  12. Free-use open SATAN oriented license

The first generation assistant, the Security Administrator's Tool for Analyzing Networks (SATAN) was developed in early 1995. It became the benchmark for network security analysis for several years. However, few updates were provided and the tool slowly became obsolete in the growing threat environment.

      Advanced Research's philosophy relies heavily on software re-use. Rather than inventing a new module, SARA is adapted to interface to other community products. For instance, SARA interfaces with the popular NMAP package for superior "Operating System fingerprinting". Also, SARA provides a transparent interface to SAMBA for SMB security analysis.

A recent addition to SARA is the ability to operate on a Windows 200* and Windows XP platforms. SARA relies on Cooperative Linux to provide the proper operating environment to operate as Windows process. This product is called coSARA.

You can find a detailed overview briefing here. The briefing provides the new information and configuration options of SARA 5.

The current version of SARA can be obtained at the SARA (Version 7.9.2a) and MD5 check from our download site. Also, coSARA is available at coSARA-7.4.1.exe.



© 1983-2010 Advanced Research Corporation ® /Updated 1 April 2010